Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232801 7.5 危険 phpbb tweaked - Phpbb Tweaked の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0680 2012-12-20 18:19 2007-02-2 Show GitHub Exploit DB Packet Storm
232802 4.6 警告 TWiki - Twiki における任意の Perl コードを実行される脆弱性 - CVE-2007-0669 2012-12-20 18:19 2007-01-28 Show GitHub Exploit DB Packet Storm
232803 7.5 危険 phpbb2-modificat - phpBB2-MODificat の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0656 2012-12-20 18:19 2007-02-1 Show GitHub Exploit DB Packet Storm
232804 9.3 危険 x multimedia system - xmms における整数アンダーフローの脆弱性 - CVE-2007-0654 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
232805 9.3 危険 x multimedia system - xmms における整数オーバーフローの脆弱性 - CVE-2007-0653 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
232806 7.5 危険 rbl - Raymond BERTHOU script collection の tForum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0642 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
232807 7.5 危険 shaffer solutions corp - SSC DiskAccess NFS Client の EnumPrintersA 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-0641 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
232808 10 危険 Zabbix - ZABBIX におけるバッファオーバーフローの脆弱性 - CVE-2007-0640 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
232809 5 警告 vlad alexa mancini - Vlad Alexa Mancini PHPFootball の show.php における重要な情報を取得される脆弱性 - CVE-2007-0638 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
232810 7.5 危険 t-systems solutions for research gmbh - MyNews の include/themes/themefunc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0633 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294121 7.8 HIGH
Local 		xnview xnview Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file. CWE-787
 Out-of-bounds Write 		CVE-2013-3246 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
294122 8.1 HIGH
Network 		supermicro
citrix 		smt_x9_firmware
smt_x8_firmware
netscaler_sdx_firmware
netscaler_firmware
netscaler_sd-wan_firmware 		Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 con… CWE-798
 Use of Hard-coded Credentials 		CVE-2013-3619 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
294123 10.0 CRITICAL
Network 		grandstream gxv3501_firmware
gxv3504_firmware
gxv3601_firmware
gxv3601hd_firmware
gxv3601ll_firmware
gxv3611hd_firmware
gxv3611ll_firmware
gxv3615w_firmware
gxv3615p_firmware
gxv3651fh… 		Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded … CWE-798
 Use of Hard-coded Credentials 		CVE-2013-3542 2024-11-21 10:53 2019-12-12 Show GitHub Exploit DB Packet Storm
294124 7.5 HIGH
Network 		loftek nexus_543_firmware The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2) firmware versions (ui and system), timestamp, serial number, p2p port number, … CWE-200
Information Exposure 		CVE-2013-3314 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
294125 7.5 HIGH
Network 		loftek nexus_543_firmware The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi. NOTE: cleartext passwords can a… CWE-522
 Insufficiently Protected Credentials 		CVE-2013-3313 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
294126 8.8 HIGH
Network 		loftek nexus_543_firmware Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) pa… CWE-352
 Origin Validation Error 		CVE-2013-3312 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
294127 7.5 HIGH
Network 		loftek nexus_543_firmware Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. (dot dot) in the URL of an HTTP GET request. CWE-22
Path Traversal 		CVE-2013-3311 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
294128 8.8 HIGH
Network 		trendnet tew-812dru_firmware Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3. CWE-352
 Origin Validation Error 		CVE-2013-3366 2024-11-21 10:53 2019-11-14 Show GitHub Exploit DB Packet Storm
294129 6.1 MEDIUM
Network 		actiontec mi424wr-gen3i_firmware Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router. CWE-79
Cross-site Scripting 		CVE-2013-3097 2024-11-21 10:53 2019-11-14 Show GitHub Exploit DB Packet Storm
294130 9.8 CRITICAL
Network 		trendnet tew-691gr_firmware
tew-692gr_firmware 		Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3. CWE-287
Improper Authentication 		CVE-2013-3367 2024-11-21 10:53 2019-11-14 Show GitHub Exploit DB Packet Storm